matrixscan-ar-web

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill explicitly requires fetching Scandit documentation at runtime to verify APIs (e.g. https://docs.scandit.com/data-capture-sdk/web/barcode-capture/api.html), so external content from that URL is fetched during runtime and directly informs/controls the agent's responses, and the skill relies on it as a required dependency.